Configuring Dynamic Arp Inspection - Dell S3048-ON Configuration Manual

Configuring Dynamic ARP Inspection

To enable dynamic ARP inspection, use the following commands.
1 Enable DHCP snooping.
2 Validate ARP frames against the DHCP snooping binding table.
INTERFACE VLAN mode
arp inspection
Examples of Viewing the ARP Information
To view entries in the ARP database, use the show arp inspection database command.
Dell#show arp inspection database
Protocol Address
---------------------------------------------------------------------
Internet 10.1.1.251
Internet 10.1.1.252
Internet 10.1.1.253
Internet 10.1.1.254
Dell#
To see how many valid and invalid ARP packets have been processed, use the show arp inspection statistics command.
Dell#show arp inspection statistics
Dynamic ARP Inspection (DAI) Statistics
---------------------------------------
Valid ARP Requests
Valid ARP Replies
Invalid ARP Requests
Invalid ARP Replies
Dell#
Bypassing the ARP Inspection
You can configure a port to skip ARP inspection by defining the interface as trusted, which is useful in multi-switch environments.
ARPs received on trusted ports bypass validation against the binding table. All ports are untrusted by default.
To bypass the ARP inspection, use the following command.
• Specify an interface as trusted so that ARPs are not validated against the binding table.
INTERFACE mode
arp inspection-trust
Dynamic ARP inspection is supported on Layer 2 and Layer 3.
260 Dynamic Host Configuration Protocol (DHCP)
Age(min) Hardware Address
- 00:00:4d:57:f2:50
- 00:00:4d:57:e6:f6
- 00:00:4d:57:f8:e8
- 00:00:4d:69:e8:f2
: 0
: 1000
: 1000
: 0
Interface VLAN CPU
Gi 1/2 Vl 10 CP
Gi 1/1 Vl 10 CP
Gi 1/3 Vl 10 CP
Gi 1/5 Vl 10 CP